Blockchain investigator tanuki42 reported an alleged attempt by a suspected North Korean recruiter to purchase the use of their Upwork identity for $300 per month. The recruiter sought access to a U.S. citizen's Upwork account and local device, citing Upwork's IP monitoring policies. Payment was offered in USD or cryptocurrency, with an additional 15% of monthly income. Tanuki42 was instructed to install AnyDesk or RustDesk remote control software, but the connection was terminated shortly after, with the chat history deleted and contact blocked. Tanuki42 shared related indicators of compromise (IOC) and included a link to their Ethereum Security QF page for donations.